Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          4YVqdi0vhjy22B/sc3YZyk1fUZEyGWjOuRxPy/pbIjA=
Subject key identifier:   07:A8:93:5A:24:34:47:49:DC:15:63:16:50:6D:4F:7B:59:93:D6:90
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       01A0BFFA1F5E4648ED4C30409AF12D8804D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          164C
Signing time:             Sun 20 Sep 2026 18:00:35 +0000
Manifest this update:     Sun 20 Sep 2026 18:00:35 +0000
Manifest next update:     Mon 21 Sep 2026 18:00:35 +0000
Files and hashes:         1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
                          2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
                          3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: A0J7mC0EOs/tCBqsKp4jXgcm/5QWqeRWGtH2l/O1PS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:fa:1f:5e:46:48:ed:4c:30:40:9a:f1:2d:88:04:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: Sep 20 18:00:35 2026 GMT
            Not After : Sep 21 18:00:35 2026 GMT
        Subject: CN=07a8935a24344749dc156316506d4f7b5993d690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:0c:22:62:27:04:b4:ce:08:b7:39:d2:e7:
                    e4:53:46:da:f5:69:74:69:ab:1b:3d:d2:d9:4d:f5:
                    cb:65:a7:b1:04:c2:2c:7c:d0:02:9a:f4:d6:17:23:
                    19:1a:82:22:b1:ea:f0:03:ed:6a:b6:74:bb:d8:ab:
                    40:c9:37:2e:26:83:51:a1:2f:84:95:b2:2a:39:05:
                    ee:02:27:12:4c:e8:77:90:da:d2:9d:23:69:db:13:
                    8a:af:64:a9:e5:b9:0f:75:e3:9b:bb:07:67:bf:28:
                    bc:db:5c:8c:3f:61:90:81:06:ec:d4:97:19:ef:a7:
                    a6:1d:d4:fe:8b:de:67:c8:07:ee:ba:b4:61:14:e5:
                    75:b2:e4:e6:8c:f1:c4:33:9b:1f:f8:d1:d0:9d:40:
                    76:58:d8:5e:f3:33:3f:77:8a:cb:ba:af:2a:5f:80:
                    ca:b1:4f:18:d1:5a:f0:8b:05:92:bd:07:0e:19:3f:
                    29:43:fd:1a:57:18:45:66:65:b7:35:e2:c7:aa:93:
                    1a:93:4e:8d:8a:76:64:0e:ae:aa:dc:03:2d:fd:86:
                    e9:fa:dd:a9:88:71:93:db:92:57:7f:02:65:07:72:
                    a1:8c:8e:4a:4a:e1:df:4e:f3:01:53:e6:a6:21:08:
                    97:50:a8:9d:98:6b:66:9f:e0:19:ef:cb:57:6e:cb:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A8:93:5A:24:34:47:49:DC:15:63:16:50:6D:4F:7B:59:93:D6:90
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:21:25:21:83:48:05:b0:86:08:14:ed:1a:71:fa:61:f8:7f:
         4c:e7:5e:9e:ee:6b:e4:76:cb:ea:7f:55:cb:84:3d:89:81:42:
         cd:c8:fc:3d:1d:ab:27:39:8c:6d:81:9e:5e:2e:53:ec:85:21:
         13:f2:1e:df:79:7f:81:d0:2a:61:9d:3f:4b:2c:be:b2:cb:4c:
         54:65:24:be:65:60:47:df:be:6c:5e:22:45:d2:1c:98:f0:68:
         13:f8:de:65:56:f4:13:74:4e:68:98:58:20:0d:20:fb:bc:23:
         28:6d:dd:03:93:2b:13:e5:bf:61:e8:b8:27:08:40:34:64:36:
         5f:1d:95:c2:cf:43:01:39:ec:b3:a1:b1:bb:bf:ac:43:a5:e7:
         2c:4e:6f:7e:94:d8:d7:e9:36:1c:7f:f0:38:d7:29:3b:49:ee:
         b3:bc:9c:72:68:21:de:d8:86:75:70:aa:60:75:4e:2b:28:6e:
         c6:78:5f:16:9b:34:6b:4b:5f:9f:57:1b:c8:b9:70:b3:f3:fa:
         a2:f1:44:83:96:46:7f:f7:0c:ec:d2:5a:92:f5:e1:3b:5a:26:
         09:1d:37:af:fa:2c:1b:cc:00:57:8a:83:08:e7:5a:e4:d9:f9:
         d2:4e:e3:ce:1f:87:1f:53:f0:86:65:62:d8:f4:92:04:13:b9:
         4a:e8:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:33:52 2026 by rpki-client